Re: Setting the bit to 128

2001-02-16 Thread Gustavo
the bit to 128 Is there an option to openssl that enables you to set the bit to 128? I want to generate the cert using the CA.pl script, but by default it sets the bit to 40. I'd like to set the bit to 128. Can someone provide the syntax for this option? Thanks. - Wally Winzer Jr

Re: Setting the bit to 128

2001-02-16 Thread Auteria Wally Winzer Jr.
] Sent: Friday, February 16, 2001 12:11 AM Subject: Setting the bit to 128 Is there an option to openssl that enables you to set the bit to 128? I want to generate the cert using the CA.pl script, but by default it sets the bit to 40. I'd like to set the bit to 128. Can someone provide

Re: Setting the bit to 128

2001-02-16 Thread Auteria Wally Winzer Jr.
u're using with!! Gustavo - Original Message - From: Auteria Wally Winzer Jr. [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, February 16, 2001 12:11 AM Subject: Setting the bit to 128 Is there an option to openssl that enables you to set the bit to 128? I want to generate the

Re: Setting the bit to 128

2001-02-16 Thread Dr S N Henson
"Auteria Wally Winzer Jr." wrote: The goal: To generate a 128-bit self-signed CA. That has little to do with the CA certificate and more to do with the software being used. If clients can only make 40 bit SSL connections then the clients probably only support 40 bit SSL (the old export

Re: Setting the bit to 128

2001-02-16 Thread Greg Stark
ot; [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, February 16, 2001 3:00 PM Subject: Re: Setting the bit to 128 So, in a nutshell openssl doesn't have the ability to create 128-bit self-signed CA's? - WW Jr. Dr S N Henson wrote: "Auteria Wally Winzer Jr." wrote: The goa

Re: Setting the bit to 128

2001-02-16 Thread Auteria Wally Winzer Jr.
. _ Greg Stark Ethentica, Inc. [EMAIL PROTECTED] _ - Original Message - From: "Auteria Wally Winzer Jr." [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, February 16, 2001 3:00 PM Subject: Re: Setting the bit to

Re: Setting the bit to 128

2001-02-16 Thread Greg Stark
] _ - Original Message - From: "Auteria Wally Winzer Jr." [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, February 16, 2001 3:22 PM Subject: Re: Setting the bit to 128 When a cert is created by openssl (using the CA.pl script): CA.pl -newca CA.pl -newreq C

Re: Setting the bit to 128

2001-02-16 Thread Joseph Ashwood
Ok, now we're getting somewhere. It's a misunderstanding of what the values mean (I'm going to over simplify some to make the points clearer). When an SSL connection is 40-bit, it means that the negotiated key size is 40-bits. When you ask to generate an X-bit certificate, that refers to the

Re: Setting the bit to 128

2001-02-16 Thread Dr S N Henson
"Auteria Wally Winzer Jr." wrote: So, in a nutshell openssl doesn't have the ability to create 128-bit self-signed CA's? There's no such thing as a "128-bit self-signed CA". The certificates that are advertised as "global server" or "SGC" or "step up" are little different to ordinary

Setting the bit to 128

2001-02-15 Thread Auteria Wally Winzer Jr.
Is there an option to openssl that enables you to set the bit to 128? I want to generate the cert using the CA.pl script, but by default it sets the bit to 40. I'd like to set the bit to 128. Can someone provide the syntax for this option? Thanks. - Wally Winzer Jr. S/MIME Cryptographic